Troubleshooting
If you have set up external authentication but users have trouble logging in, note the following:
The problem may be related to the identity that JICS is using to connect to the outside service. We recommend that the JICS application pool be set up to operate under the Network Service account. For supported platforms, this should already be set by default within IIS, but if it was changed at some point to an identity with fewer permissions, your users may experience problems.
Confirm that the users who are having problems are actually members of base roles connected to the expected authentication method.